GiliSoft Video DRM Protection

Protect your lessons before sharing them with students, customers, or staff. Use playback passwords, device binding, viewer watermarks, and access limits to keep training content with its intended audience.

  • Authorize training playback with passwords and device binding
  • Show learner watermarks and set course access periods
  • Manage leaked passwords with online blacklist checks
GiliSoft Video DRM Protection illustration of video playback, a viewer identifier, a lock, and access time

How to Protect Training Videos from Unauthorized Sharing

A learner can forward a course file in seconds. Protect the lessons before delivery, authorize playback for each enrollment, and keep a practical way to handle shared passwords, course expiry, refunds, and replacement computers.

Quick Answer

For training videos you distribute as files, create a protected package in GiliSoft Video DRM Protection. Use PC Binding when access should belong to one learner's computer, add an enrollment watermark and expiration date, and configure online blacklist verification if you need to reject leaked or cancelled passwords. The goal is to control access to the protected content, even if the package file is copied.

What Happens If a Learner Copies the File or Shares a Password?

Protecting a training video does not mean the package becomes impossible to copy. A learner may still forward the file or put a second copy on a USB drive. What matters is whether the recipient can play the protected lessons.

Someone forwards the package

With PC Binding enabled, the Playback Password is created for a particular Machine Code. A copy of the package on a different computer still needs playback authorization for that computer; the original learner's password does not authorize the new PC.

Someone forwards the password too

A fixed password shared by all learners can travel with the file. For one-computer access, use the hardware-bound mode and issue each learner their own Playback Password. Keep that password linked to the enrollment record.

A viewer watermark adds another layer: a visible learner name or enrollment ID can help connect a redistributed recording to the issued access. It supports traceability; it does not replace encryption or device binding.

Match Each Sharing Risk to a Playback Control

Training-video riskUseful controlWhat to verify
The course file is sent to a class groupProtected package and PC BindingThe package and issued password fail on an unapproved computer.
Several learners reuse one passwordIndividual, machine-bound Playback PasswordsEach enrollment has the correct Machine Code and its own access record.
A learner keeps watching after the course periodExpiration DateThe selected verification method and end date behave as intended.
A refund or leak requires access to be cancelledConfigured online password blacklistThe player rejects the password when it checks the updated list.
A learner records or republishes a lessonViewer watermark and anti-capture settingsThe watermark is readable and the selected capture controls work in the target environment.

Choose a Setup That Fits Your Learners

Paid courses and coaching

Use an enrollment-specific password, an assigned PC, and a course end date. Keep a record of which credential to replace or cancel if a learner asks for support.

Employee or partner training

Choose the approved computer or delivery device, use an appropriate employee or batch identifier, and assign someone to manage access changes. Keep company offboarding policy in the corporate training security guide.

When is a fixed password enough?

A shared password may be sufficient for a low-risk preview among known recipients when sharing that password is acceptable. It is not the right setting when the requirement is one enrolled learner on one computer. For web-course delivery, keep platform sign-in separate from the protection applied to files learners receive; see protecting e-learning videos.

Example: Deliver a 12-Lesson Course with 30-Day Access

Suppose a trainer sells a course containing 12 lessons and wants each enrollment to work on one Windows PC for 30 days. The following is an example setup, not a customer result or a limit of the software.

Course project
Use a recognizable Project ID, such as COURSE-A-COHORT-01, and keep the matching Encryption Key in the publisher's records.
Approved computer
Choose PC Binding. Ask the enrolled learner for the Machine Code shown when opening the protected package on the PC they will use.
Access period
Set an explicit Expiration Date corresponding to the promised 30-day period when creating that learner's password. This example does not assume automatic activation-relative expiry.
Viewer watermark
Use a minimal identifier such as COURSE-A / LEARNER-1042, so a visible watermark can be matched to the enrollment record.
Cancellation plan
Configure online blacklist verification before release. Record the issued password so it can be rejected at a future online check after a refund or confirmed leak.
Practice and replay
Do not add a play-count or seeking restriction unless the course actually needs it. Learners may need to repeat demonstrations or revisit a difficult lesson.

Send the protected course package and the learner's Playback Password, together with the player instructions and a support contact. Do not include the original lesson files or the publisher's Encryption Key.

How to Protect and Deliver the Training Videos

Use the following settings for the one-learner, one-PC example. The screenshots show the actual controls; labels and available options can vary by edition.

Add the approved course lessons

Open DRM Video and use Add Files/Folders to add the lessons for this course edition. Check the list before continuing; keep the original source videos in the publisher's archive.

DRM Video provides the Add Files/Folders entry for the course content.

Choose PC Binding and keep the publisher key

Set a recognizable Project ID and securely retain the Encryption Key. For the per-learner example below, choose the mode where one playback password works on one hardware-bound computer. Select the package format for the intended player.

Encryption Settings shows Project ID, Encryption Key, package formats, and the computer-bound password mode.

Set the playback protections you need

Review Anti-Copy Settings for screen-capture and playback-environment controls. Keep ordinary learner tasks usable, and leave settings that forbid internet-connected playback off if your delivery needs online blacklist checks.

Anti-Copy Settings includes virtual-machine, screenshot, keyboard, and playback-environment options.

Configure blacklist verification before release

Enable and configure Play Password Blacklist for a project that needs to reject leaked or cancelled passwords. Set up the management access and verification service before generating the delivery package, then test a revoked test password.

The Play Password Blacklist tab shows Enable Password Blacklist and administrator access. It does not show a completed revocation.

Create the protected course package

Choose the output folder and whether the lessons belong in one package or separate packages, then use Encrypt now! to create the protected result. Keep the source videos and publisher key out of the learner's delivery folder.

Output shows package grouping, output location, Encrypt now!, and Create Play Password. Progress is still at zero in this screenshot.

Create access for each enrolled learner

After a learner opens the protected package on their PC, obtain their Machine Code. Use Create Play Password with the matching Encryption Key and that code, add the Text Watermark, and set the course expiration date. Send the generated Playback Password, not the Encryption Key.

Create Play Password shows Encryption Key, User's Machine Code, Text Watermark, Play Count Limit, and Expiration Date.

Open the full Video DRM Protection user guide for individual setting details. This page focuses on the training-course delivery process rather than repeating every DRM feature.

Test the Learner Experience Before Releasing the Course

TestExpected result
Approved learner PCThe correct password opens the lessons. Sound, seeking, captions or supporting material, and watermark placement work as required.
A copied package and the same password on another PCPC-bound access is not accepted on the unapproved computer.
A short, test-only expiration dateAccess ends as configured with the chosen verification method. Do not change the production computer's clock to test it.
A revoked test passwordThe player rejects it after checking the updated online blacklist.
The intended offline viewing modePlayback behaves as promised, and support staff understand that a disconnected player cannot receive a new blacklist update immediately.
A legitimate computer replacementThe support team can verify enrollment and issue a new machine-bound password without disclosing the Encryption Key.

Handle Shared Access, Refunds, and Replacement Computers

  1. Identify the enrollment and credential.Match the learner or watermark identifier to the course project, Machine Code, issued Playback Password, and original access end date.
  2. Cancel compromised access through the configured blacklist.Add the leaked or refunded password and save the change. Confirm rejection with a test player that can reach the updated online verification service.
  3. Reissue access only when it is appropriate.For a verified computer replacement, obtain the new Machine Code and create a replacement password. Keep the original course end date unless an extension is intended.
  4. Check the delivery folder and instructions.Keep the open MP4s and publisher key out of the learner package. Record what changed so later support requests can be handled consistently.
Revocation is not an instant offline recall. Enable blacklist verification before delivery. A newly cancelled password is rejected when the protected player checks the updated online list; a disconnected copy does not receive the update immediately. Use a planned expiration date as well when course access has a fixed end.

See how to revoke video access for blacklist setup and verification details.

Training Video Protection FAQ

Why can a protected training video file still be copied?

The package file can still be copied or forwarded. Protection applies to access to the content inside it. When PC Binding is configured, a Playback Password created for one Machine Code does not authorize playback on a different computer. Test both the original and a copied package on an unapproved PC.

What if a learner shares both the file and the playback password?

A fixed password can be shared, so it is not the right choice when each learner should be restricted to one computer. Use PC Binding and create the learner's Playback Password from their Machine Code. If a password is compromised, add it to the configured online blacklist; rejection takes effect when the player checks the updated list.

How do I bind a training video to one learner's computer?

Choose the computer-bound playback mode when preparing the protected project. The learner opens the package on the intended PC and sends the displayed Machine Code to the publisher. Use that code and the matching Encryption Key in Create Play Password, then send the learner only the resulting Playback Password.

Can learners watch protected lessons without a continuous internet connection?

An appropriate package and authorization method can support offline viewing. Test that mode before delivery. An online blacklist cannot communicate a newly cancelled password to a disconnected player; do not treat remote revocation as an immediate offline control.

How can I stop access after a refund or course cancellation?

Keep a record of the Playback Password issued for each enrollment. When online blacklist verification was configured before release, add the cancelled password to the list so future checks reject it. For a planned course end, set an expiration date when issuing access. Verify both behaviors in your delivery setup.

What should I do when a learner changes computers?

Verify the enrollment, obtain the new computer's Machine Code, and create a replacement Playback Password for that device. Keep the original course end date unless an extension is intended. If the old password should no longer work, blacklist it when that verification was configured; an offline old device will not receive the update immediately.

Can the learner's name or enrollment ID appear on the video?

Yes. Use viewer-specific Text Watermark when creating access. An enrollment ID, learner name, or delivery-batch label helps identify the issued copy during playback. Use a minimal identifier rather than exposing unnecessary personal information in the watermark.

Does DRM stop every kind of screen recording?

Anti-copy and anti-capture settings can restrict supported software capture paths, and viewer watermarks add traceability. They cannot guarantee that every recording method is blocked or stop an external camera from filming a screen. Test the selected controls with the actual player and learner environment.

Should I give learners the Encryption Key?

No. Keep the Encryption Key and Project ID in the publisher's project records. The Encryption Key is used to create access; the Playback Password is the credential sent to the learner. They are not interchangeable.

Can I revoke an ordinary MP4 that I already sent out?

Protecting a new package does not retroactively encrypt or recall an ordinary MP4 already received by someone else. Start protected delivery before distributing the source files, and send learners the protected package rather than including the original videos alongside it.

Protect Your Training Videos Before Sharing Them

Create protected lessons, issue access for your learners, and verify the complete course experience with GiliSoft Video DRM Protection.